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Abstract. For every finite collection C of abelian varieties over Fq, we pro- 
duce an explicit upper bound on tlie genus of curves over Fq wliose Jacobians 
are isogenous to a product of powers of elements of C. 

Our explicit bound is expressed in terms of the Frobenius angles of the 
elements of C. In general, suppose that S is a finite collection of s real numbers 
in the interval [0,7r]. If S = {0} set r = 1/2; otherwise, let 

.=#(snw)+2 y: \^]- 

ee.s\{o,'K} 

We show that if C is a curve over Fq whose genus is greater than 

min(^23sV»log<?, {^g + i f (j-^)) ' 

then C has a Frobenius angle 8 such that neither nor —9 lies in S. 

We do not claim that this genus bound is best possible. For any particular 
set S we can usually obtain a better bound by solving a linear programming 
problem. For example, we use linear programming to give a new proof of a 
result of Duursma and Enjalbert: If the Jacobian of a curve C over F2 is 
isogenous to a product of elliptic curves over F2 then the genus of C is at 
most 26. As Duursma and Enjalbert note, this bound is sharp, because there 
is an F2-rational model of the genus-26 modular curve X(ll) whose Jacobian 
splits completely into elliptic curves. 

As an application of our results, we reprove (and correct a small error in) 
a result of Yamauchi, which provides the complete list of positive integers TV 
such that the modular Jacobian Jo{N) is isogenous over Q to a product of 
elliptic curves. 



1. Introduction 

Let (C„) be a sequence of curves over a finite field k such that the genus of C„ 
tends to infinity with n. Serre [15l Cor. 2, p. 93] applies a result of Tsfasman and 
Vladut; [TBIITI] to show that the dimension of the largest fc-simple isogeny factor 
of the Jacobian of Cn tends to infinity with n. In this article we give an explicit 
bound for this asymptotic result. 

The Weil polynomial of a d-dimensional abelian variety A over a finite field Fq 
is the characteristic polynomial of the q-th power Frobenius endomorphism of A 
(acting, for instance, on the £-adic Tate module of A). The Weil polynomial is a 
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monic polynomial in Z[a;] of degree 2d, and its complex roots ai, . . . ,a2d all have 
magnitude ^/g. The roots can be written aj = y/qexTp{i9j) for real numbers 9j in 
the half-open interval (— 7r,7r], and the roots can be ordered so that ajaj^d = 9 
and 

O<01<92<--- <9d<TT. 

The 0j are called the Frobenius angles of A, and the 9j that are nonnegative are the 
nonnegative Frobenius angles of A. If C is a curve over Fg, we define the Frobenius 
angles of C to be the Frobenius angles of its Jacobian. 

We show that for any finite set S of real numbers in the interval [0,7r], every 
curve over of sufficiently large genus has a nonnegative Frobenius angle that 
does not lie in S. 

Theorem 1.1. Let S be a finite set of s real numbers 9 with < 9 < n. If S = {0} 
set r = 1/2; otherwise, take 

r = #(5nW) + 2 

ees\{o,TT} 

where \x\ denotes the least integer greater than or equal to the real number x. Let 

Bi = 23 s^ff' log q and B2 = + if' 

If C is a curve over ¥q whose nonnegative Frobenius angles all lie in S , then the 
genus g of C satisfies g < Bi and g < B2. 

Remark 1.2. Elementary calculations show that if s > Ty/^logq then the bound 
Bi from Theorem 1 1.11 is smaller than the bound B2. 

Theorem 11.11 allows us to derive an explicit version of Serre's result. 

Corollary 1.3. If C is a curve of genus g > 2 over a finite field Fy, then the 
Jacobian of C has a simple isogeny factor of dimension greater than 

log logff 
V 61og(7 

The first genus bound from Theorem 11.11 leads to a corollary that docs not 
mention Frobenius angles. 

Corollary 1.4. Let A be a d-dimensional abelian variety over Fg. If C is a curve 
over Fg of genus greater than 23 d^q^'^ log q then the Jacobian of C has a simple 
isogeny factor B that is not an isogeny factor of A. 

One natural choice for the set S in Theorem 11.11 is the set of all nonnegative 
Frobenius angles for elliptic curves over a given finite field. Applying the theorem 
to this set leads to the following corollary: 

Corollary 1.5. Suppose C is a curve over Fg whose Jacobian is isogenous over 
Fq to a product of elliptic curves. Then the genus of C is at most 510 q^^^^ \ogq. 

We prove Theorem 11.11 and its corollaries in Section [5] As we will show in 
Remark 12.61 for every prime power q there is a family of sets S for which (in 
the notation of Theorem ll.l|) the ratio Bi/g is less than 47s^logg; similarly, in 
Remark 12.41 we show that there is a family of examples with s = 1 and g — ^ 00 
for which the ratio ^2/5 approaches 1. For many sets S, however, we expect that 
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the bounds given by Theorem 11.11 are likely to be far from optimal; in Section [3] 
we show how tighter bounds can sometimes be obtained by solving an integer 
linear programming problem. As a concrete example, we take S to be the set 
of nonnegative Frobenius angles of the elliptic curves over F2, and use the linear 
programming method to show that the genus of a curve over F2 whose Jacobian 
splits up to isogeny into elliptic curves is at most 26, a result proved earlier by 
Duursma and Enj albert [8^ by a different (but related) method. In Section [4] we 
show that for this particular set S the genus bound of 26 is sharp, because the 
genus-26 modular curve X{11) has a model over F2 whose Jacobian is isogenous 
over F2 to a product of elliptic curves. (We find sharp upper bounds in other cases 
as well; see Remark 13.71 ) In Section [5] we use this genus bound to give a simple 
proof of a result of Yamauchi j21j on the values of N for which the Jacobian of the 
modular curve Xo{N) is isogenous over Q to a product of elliptic curves. 

Conventions and notation. Operators such as Hom, End or Aut applied to varieties 
over a field k will always refer to fc-rational homomorphisms and endomorphisms. 
Similarly, when we say that an abelian variety over k is 'decomposable', 'split', or 
'simple', these words should be interpreted with respect to isogenics over k. In the 
sequel, we use e(x) to denote exp(ix), where i = a/— T, and we use Re(a;) to denote 
the real part of a complex number x. 

Acknowledgments. After an initial version of this work was posted on the arXiv, 
Mike Zieve alerted us to the paper of Duursma and Enjalbert [8^ mentioned above, 
which contains a result that implies our Lemma l2. II (see §2.4 of the arXiv version 
of [8^) and which proves that a curve over F2 whose Jacobian is isogenous to a 
product of elliptic curves has genus at most 26. The print version of their paper 
also states that there is a model oi X{11) over F2 whose Jacobian is isogenous over 
F2 to a produce of elliptic curves; this is proved in an addendum added to the 
arXiv version. We are grateful to Mike Zieve for telling us about and to Iwan 
Duursma for discussions about these results. 

We are grateful to Armand Brumer for informing us of Yamauchi's paper |21j . 

In the initial version of this paper, the bound Bi in Theorem 11.11 was a doubly- 
exponential expression in s that we obtained via an argument using our Lemma [2.1l 
We are extremely grateful to Zeev Rudnick and Sergei Konyagin for pointing out 
to us that the work of Smyth [16l could be used to get a bound that is singly- 
exponential in s. Our proof that Bi gives an upper bound for the genus is due 
almost entirely to them. 

The work in this paper was begun at the GeoCrypt 2009 conference in Pointe- 
a-Pitre. We would like to thank the organizers of the conference for providing a 
stimulating environment for collaboration. 

2. Proof of Theorem II. II and its corollaries 

In this section we prove Theorem 11.11 and Corollaries 1 1 . 41 and 11.51 The arguments 
that show that Bi and B2 give upper bounds on the genus are independent of one 
another, so we break the proof of Theorem 1 1 . 1 1 into two parts. 

Proof of Theorem II. 11 part 1: g < Bi. The bound g < Bi holds trivially when S 
is empty, so we may assume that s > 0. First we consider the case where s > 1. 

Suppose C is a curve over F^ all of whose Frobenius angles lie in S. Let the 
elements of 5* be ^i, . . . , 6*^, and for each index j let bj denote the multiplicity of 9j 
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as a Frobenius angle for C (unless 9j — or 6j — n, in which case we let bj denote 
half of this multiplicity) , so that we have 

bi + . . . + bs = g. 

Reindex the 9j and the corresponding bj so that bi > b2 > ■ ■ ■ > b^, and note that 
this implies that bi > g/s. Finally, for every j let Zj = e{9j), and for every integer 
A: > let G{k) denote the weighted power sum 

G(fc) = b^z^ + ■■■ + b,zl 

Weil's 'Riemann Hypothesis' for curves over finite fields says that 

#C{Fg, ) = + 1 - ^ = + 1 - 2q''/^ Re G{k), 

so we find that 

2ReG(/fc) = (z'^/^ - #C(F,fe)/g'=/2 

Now we apply a result of Smyth [15] . Let 

13 := {b2 + --- + bs)/bi, 
let A be an arbitrary real number with < A < 1 , and let 

K := 1+1(413 + 3)/ X\. 

Smyth shows that then 

(6i/4)(l-A)< max ReG(fc). 

l<k<K 

In our case, we have /? — g/bi — l<s — 1, soi4r<l + (4/3 + 3)/A < L, where we 
set 

L:=l + (4s- 1)/A. 

Also, for each k we have ReG(fc) < {l/2){q''/^ + q^^/'^). Since q^ + q^^ is an 
increasing function of x for x > 0, Smyth's result shows that 

(5i/4)(l-A)<(l/2)(//2^g-^/2). 

As we noted earlier, we have bi > g/s, so for every A with < A < 1 we have 

(1) - < At ii'^' + 

s 1 — A V 

We will apply this inequality with A — 1 — 1/a, where 

'4s- 1\ 

logq. 

(This choice of A was obtained by taking the first two terms of the power series 
expansion (in 1/a) of the value of A that minimizes q^/^/{l — A).) Note that 
i > 4s > 8, so that 

25d 
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Combining this with ([T]), wc find 




= (2^) (4s- l)(logg) exp((L/2)logg) 
= 1 + (4s - 1)/A, we find that 



Using the equafity L 



(L/2)logg=(logg)/2+ (^1^) 



= (logg)/2 + a/A 

= (logg)/2 + aV(a-l) 
= (logg)/2 + a + a/(a - 1) 
= 2s log (7 + a/(a — 1). 



Since s > 2 and q >2 we have a > (7/2) log2 and exp(a/(a — 1)) < 5.5. Thus 
exp((L/2) logg) < 5.5 exp(2slog9) = 5.5 g^*, 



This shows that g < Bi when s > 1. 

Now suppose s = 1. Let 9 be the unique element of 5. li 9 > tt/2 then the 
quantity r defined in the statement of the theorem is equal to 2. It is easy to show 
that then B2 < Bi, so the bound g < B2, proved below, shows that g < Bi. 

The final case to consider is when s = 1 and 9 < tt/2. If C has only one 
nonnegative Frobenius angle 9, then e{9)^Jq must be an algebraic integer of degree 
at most 2 over the rationals, so the quantity t — e{9)^fq + e(— 0)y^ is an integer. 
Furthermore, since 9 is less than 7r/2 the integer t is positive. Then Weil's theorem 
shows that 



Our proof that B2 gives an upper bound for the genus relies upon the following 
lemma. 

Lemma 2.1. Let S he a set 0/ real numbers in [0,7r] and let T e R-i-'f] be a 
polynomial with nonnegative coefficients such that T(0) = and Re(T(e(^))) > 1 
for all 9 £ S. If C is a curve over Fq whose nonnegative Frobenius angles all lie 
in S, then the genus of C is at most {T{q^/'^) + T{q-^/'^)) /2. 

Proof. Let ai, . . . ,a2g be the complex roots of the Weil polynomial of C, listed 
with appropriate multiplicities, so that from Weil's theorem we have 



so 



- < (4s)(logg)(5.5g2^) < 2isq^nogq. 




0<#C(F,) =g + l-5t<g+l-5, 
so that g < q + \. Again, it follows easily that g < Bi. 



□ 



#C(F,,.) 



m 



for all integers m > 0. Write 



T — aix + 



+ OnX 



Oj > 0. 
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Then 



„m/2 
ra—l 



2g 

/2 



m=l y j=l 

25 

By hypothesis, each summand Tipijj ^fq) has real part at least 1, so 

0<T(gi/2)+r(^-i/2)_25, 

and hence 

^ r(gV^) + r(g-v^) 

□ 

Remark 2.2. This lemma could also be proved by using the results in §2.4 of the 
arXiv version of [S] . 

Remark 2.3. Lemma |2. H is stated for polynomials T with nonnegative coefhcients, 
but an analogous statement holds when T is a power series in R[[x]] with nonneg- 
ative coefhcients, so long as its radius of convergence exceeds y/q. 



With this lemma in hand, we complete the proof of Theorem ll.il Our proof will 
depend on a careful choice of the polynomial T. 

Proof of Theorem 11.11 part 2: g < B2. It is easy to check that g < B2 when S is 
empty, so we may assume that S is nonempty. If S* = {0} then the quantity r from 
the theorem is equal to 1/2. In this case we can take T = x, and we find that 
{T{q^/'^) + r((7~i/2))/2 is less than B2. Then Lemma O shows that g < B2. So 
let us assume that S contains a nonzero element. 

Given a nonzero e 5, let m — \j0~\ , so that cos{m9) < 0. li 9 = n let Pg be 
the polynomial 1 + a;; otherwise, set Pg = 1 — 2cos{m9)x"^ + cc^™. In both cases 
we have Pg{e{9)) = 0. Let 

n 

ees\{Q} 

Then P is a polynomial with constant term 1, with nonnegative coefficients, and 
with degree equal to r, where 



r = #(5nM) + 2 Yl \ 

eeS\{o,7r} 



29 



IS as m the statement of the theorem. Let T={P-lf. Then r(0) = 0, the 
coefficients of T are nonnegative, and for every 9 G S \ {0} we have T{e{9)) — 1. 
Also, for each 9 we have Pg{l) > 2, so P(l) > 2 and T(l) > 1. Lemma ED shows 
that any curve whose nonnegative Frobenius angles all lie in S must have genus 
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no larger than (r(g^/^) + T{q ^/^))/2. Now, for positive real numbers z we have 
1 < P{z) < (1 + 2)^ so that T{z) < (1 + zf'\ Thus we have 

T(gi/2) + r(<z-i/2) < + 1)2'- + (1/^ + 1)2. 

which gives the inequality g < 82- □ 

Remark 2.4. In Section [3] we will see that our bounds can sometimes be bad. 
However, the following easy example shows that at least in one case our second 
bound is asymptotically exact as q — >■ 00. For any prime power q let be a 
supersingular elliptic over with Weil polynomial + q, corresponding to the 
set 5* = {tt/2}. Applying Theorem ll.il we see that the genus of a curve C/Fq with 
Jacobian isogenous to a power of E is bounded above by 

+ 1)' • (^^^) - as q ^ c^. 

On the other hand, Jac(C) is isogenous to a power of E if and only if C is optimal 
over Fg2 , in the sense that its number of points attains the Weil upper bound. But 
the maximal genus of such a curve is q{q — l)/2 ^ 9^/2 (see [H]), attained by the 
Hermitian curve Hg defined by + y''^^ + z'^^^ = (see for instance |14j). 

Remark 2.5. The Hermitian curve Hq, viewed as a curve over Fg2, again gives an 
example of a curve whose genus comes close to the upper bound B2. If we take 
S = {tt} then the bound B2 for the field F^2 is 

(g + l)2. ^q2/2 asg^cx), 

while Hq has genus q{q — l)/2. 

Remark 2.6. Hermitian curves can also be used to give examples that limit the 
extent to which we might hope to improve the bound Bi. For any integer s > 0, 
let S be the s-element set 

r TT Stt (2s - l)7r1 
\2^' 2^''"' 2^ J ■ 

Let q be any prime power and set Q — q^ . Note that the nonnegative Frobenius 
angles of a curve C over Fg are contained in S if and only if the only nonnegative 
Frobenius angle of the base extension of C to Fq is 7r/2. Let C be the curve 
_|_ yQ+i _)_ 2;'3+i = over Fq. As noted in Remark 12. 4[ the base extension 
of C to Fq has 7r/2 as its unique Frobenius angle, so all of the Frobenius angles 
of C itself are contained in S. Since the genus of C is [q^^ — q*)/2, we see that 
Theorem 11.11 would be false if we replaced Bi with any expression of the form 

(polynomial in s and log q) q^^~^ 

for a positive constant e. 

We end this section by proving the corollaries from the introduction. 

Proof of Corollary 11.31 We begin by noting that for every integer n > 0, the 
number of isogeny classes of n-dimensional abelian varieties over Fq is less than 
is easy to check for n = 1 (see the proof of CoroUarv 11.51 below) 
and for n = 2, while for n > 2 it follows from the results in [B] (as corrected in [7]). 
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We leave the details of the argument to the reader, but we do at least note that it 
is helpful to observe that for every n, the quantity Vn in [6j Thm. 1.2] is bounded 
above by 264. It follows that the number of isogeny classes of simple abelian va- 
rieties over Fq of dimension at most n is also less than 6" and that the 
number of nonnegative Frobenius angles of abelian varieties over Fq of dimension 
at most n is less than n6"'^g"^"'"'"^''/'*. 

Suppose, to obtain a contradiction, that the corollary is false, and let C be a 
curve of genus g over that provides a counterexample. Take 

^ ^ / log log g 
V G\ogq 

For C to provide a counterexample we must have n > 1. We will apply Theo- 
rem 11.11 to the set of nonnegative Frobenius angles of abelian varieties over Fq of 
dimension at most n; as we have just noted, this means that in Theorem 11.11 we 
have s < n6" Simple estimates for the terms in the right-hand side of 

this inequality show that 

(2) s<q^"\ 

Note that there are at least 5 isogeny classes of elliptic curves over any field, so 
s > 5; using this fact it is easy to show that the bound Bi = 23s^(7^* log 9 from the 
theorem satisfies 

(3) B, < 
The definition of n tells us that 

log log 5 > 6n^ logg, 

so exponentiating gives us 

logs > (f"''^ > 4/"^ logg > 4s log g, 
where the third inequality follows from Exponentiating again, we find that 

by ([3]). Theorem 1 1 . 1 1 then shows that Jac C has a simple isogeny factor of dimension 
greater than n, contradicting our assumption that C was a counterexample to the 
corollary. This contradiction completes the proof. □ 

Proof of Corollary II. 4[ Let S be the set of nonnegative Frobenius angles of the 
abelian variety A over F^, so that #5 < d. If C is a curve over F^ with genus 
greater than 23 (Pq^'^ log q then C has a nonnegative Frobenius angle 9 not in S. 
Let B be any element of the unique isogeny class of simple abelian varieties over Fq 
that have 9 as one of their Frobenius angles. Then B is an isogeny factor of JacC. 
On the other hand, A and B have coprime Weil polynomials, so by the Honda-Tate 
theorem B is not an isogeny factor of A. □ 

Proof of Corollary 11.51 Let m be the largest integer with < Aq. The Weil 
polynomial of an elliptic curve over F^ is of the form x'^ — tx + q, where t is 
an integer with — m < t < m. (Not every t in this range need come from an 
elliptic curve.) The nonnegative Frobenius angle 9t corresponding to a given t is 
9t = cos^^{t/{2^)). We take S to be the set {6*4 : ~m<t < to}. 
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Clearly < 4y/g+ 1. The bound Bi from Theorem 1 1.1 1 is then 

23 s2g2s log ^ < 23 (4^ + 1)2^8^9+2 log q 




< 510g^v^+^logg. 



□ 



3. Linear programming 



The arguments we used to prove Theorem 11.11 used no special properties of the 
set S and give a bound that is almost certainly far from optimal when applied to 
most S. For example, suppose we take S to be the set of nonnegative Frobenius 
angles coming from the elliptic curves over F2. There are five isogeny classes of 
elliptic curves over F2 (each containing a single curve), corresponding to the five 
possible traces of Frobenius —2,-1,0, 1,2 (see [5], [501 Theorem 4.1]). For each of 
these traces t, let at = {—t + y/t"^ — 8)/2, let Bt be the argument of a*, and let 
Et be an elliptic curve over F2 with trace t. Let us apply Theorem 11.11 to the set 
S = {Qt}. We find that Bx ~ 408125 and Bi w 2.6 x 10^°. However, the best upper 
bound on the genus is much smaller than these numbers. 

Theorem 3.1 (Duursma and Enjalbert [8]). Suppose C is a curve over F2 whose 
Jacobian is isogenous to a product of powers of the Et- Then the genus of C is at 
most 26. 

Remark 3.2. Duursma and Enjalbert prove this result by using a stronger version 
of our Lemma 12.11 We give the proof presented here as an example of our general 
technique of using linear programming to get genus bounds. 

Remark 3.3. We will see in Section |4] that the bound in Theorem 13. H is sharp. 

Proof of Theorem 13.11 Our bounds in Theorem 11.11 were obtained from the fact 
that the number of points on a curve over a finite field is always nonnegative. We 
actually know a somewhat stronger constraint: For every n > 0, the number of 
degree-n places on a curve is nonnegative. If the size of the base field is large 
compared to the genus of the curve in question, the bounds we get from using 
place counts are not much better than the one we get from point counts. However, 
Theorem 13.11 involves a very small field indeed. 

Let C be a curve as in the statement of the theorem. In particular, suppose 
there are integers > such that the Jacobian of C is isogenous to 



X E'L-i X E^" X El' X E^\ 
Then for every n > the number of points on C over F21 is given by 



#C(F2.)=2" + 1- etTr(an, 



-2<i<2 

and the number iV„ of degree-n places on C is given by 




where /i is the Mobius function. 
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The nonnegativity of the number of degree-n places, for n = 1, . . . , 8, is expressed 
by the foUowing inequahties: 



(4) 



-2e_ 


-2 


— e_ 


-1 




+ei 


+262 


< 3 


e_ 


-2 


— e_ 


-1 


-2eo 


-2ei 


-62 


< 1 


2e_ 


-2 


+2e_ 


-1 




-2ei 


-262 


< 2 


-2e- 


-2 


+e_ 


-1 


+3eo 


+ei 


-262 


< 3 


2e_ 


-2 


-2e_ 


-1 




+2ei 


-262 


< 6 


— e_ 


-2 


+e_ 


-1 


-2eo 


+3ei 


+62 


< 9 


-2e_ 


-2 


+2e_ 


-1 




-2ei 


+ 262 


< 18 


5e- 


-2 


-4e_ 


-1 


+3eo 


-4ei 


+ 562 


< 30 



We claim that X]t=-2 ^* — ^'^^ nonnegative integers ej satisfying the inequal- 
ities above. Indeed we show this even if the ej are allowed to be nonnegative real 
numbers. Maximizing their sum is then a linear programming problem. Solving 
the dual problem, we find that if we take 39 times the third inequality of (|3]), plus 
44 times the fourth inequality, plus 78 times the sixth inequality, plus 32 times the 
eighth inequality, we obtain 

72e_2 + 72e_i + 726o + 726i + 7262 < 1872, 

so that 6_2 + 6-1 + 60 + 61 + 62 < 1872/72 = 26, as claimed. □ 

Remark 3.4. By enumerating 5-tuples of nonnegative integers (6_2, e_i, 60, ei, 62) 
that sum to 26 and checking whether they satisfy the inequalities ([4]), one finds 
that if a genus-26 curve over F2 has a completely split Jacobian, then the Jacobian 
is isogenous to one of the varieties 

X X X Ef X El, 

Et^ X E\ xElxEfx El, or 

E^_2 X Et^ xE^xElx El 

Remark 3.5. We would not get a genus bound if we looked only at the inequalities 
coming from counting the places of degree strictly less than 8. The reader can check 
that for any even g, the values 6_2 = 62 = g/2 and e_i = cq = 61 = satisfy the 
first seven inequalities in the system On the other hand, a priori there is no 
reason to think that the bound we get from looking at the counts of places of degree 
8 and less will be the best possible; perhaps by using the nonnegativity of several 
more place counts, we would get a better bound. In this particular instance, results 
of Section [4] show that the bound we obtain is in fact sharp. 

Remark 3.6. A similar argument, using places of degree at most 12, shows that 
a curve over F3 whose Jacobian is isogenous to a product of elliptic curves must 
have genus less than or equal to 2091. By extending the argument slightly (or by 
using an integer linear programming package, such as the one in Magma [2]) one 
can improve this upper bound to 2085. We suspect that this bound is not sharp! 

Remark 3.7. If one restricts to curves whose Jacobians are isogenous to a product 
of powers of ordinary elliptic curves, one finds a genus bound of 3 over F2 and 26 
over F3. The first bound is reached by the the curve 

4|4|4|22|22|22|2 , 2, 2 n 

X + y + z + X y + X z + y z + x yz + xy z + xyz = 

which is a twist of the Klein quartic; the second bound is reached as well, as we 
show in Section [H 
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4. The modular curve X{11) 

In this section we show that the modular curve ^(11) has a model defined 
over F2 whose Jacobian is isogenous over F2 to a product of elliptic curves. Since 
X{11) has genus 26, this example shows that the bound of Theorem 13.11 is sharp. 
Duursma and Enjalbert ^ provide a different proof that X{11) has a model over 
F2 with completely split Jacobian; their argument, found in the addendum to the 
arXiv version of their paper, relies on working with Klein's explicit model of X(ll) 
in P4. 

Let G be the twist of the finite group scheme Z/llZ over F2 on which the 
F2-Frobenius acts as multiplication by 3, and let G' be the Cartier dual of G, so 
that G' is the twist of Z/llZ on which the F2-Frobenius acts as multiplication 
by 2/3 = —3 mod 11. Let e : G x G' Gm be the natural pairing from G x G" to 
the multiplicative group. 

Let X be the modular curve over F2 whose non-cuspidal A'-rational points, for 
every extension K of F2, parametrize pairs {E,ip), where E is an elliptic curve 
over K and if is an isomorphism from the group scheme -B[ll] to the group scheme 
(G X G') (8)F2 K that takes the Weil pairing on -E[ll] to the pairing e. 

Theorem 4.1. The genus of X is 26, and the Jacobian of X is isogenous to 

E^2 X -S-i X E^ X Ef X El, 

where each Et is an elliptic curve over F2 with trace t. 

Proof. The curve X is geometrically isomorphic to X{1\), so it has genus 26 
and geometric automorphism group isomorphic to PSL2(11) (see |13 !, Theoreme 5] 
and [T]). Consider the group scheme (G x G') ®-p2 F4; it is simply (Z/llZ)^, with 
the F4-Frobenius acting as multiplication by —2. The automorphism group of this 
F4-scheme is GL2(11), and the subgroup of automorphisms that respect the pairing 
e is isomorphic to SL2(11). There is a surjective map 

Aut ((G X G') (8)F2 F4, e) ^ Aut(X ®-p2 F4) 

that sends an automorphism a of the finite group-scheme to the automorphism j3 
of X (8)F2 F4 that takes a pair {E,(p) to {E,a(p), and the kernel of this map is 
the group {±1}. Therefore all of the geometric automorphisms of X are already 
defined over F4. 

Using [ini Lemma 2.1] we see that the twists of the curve X (E)f2 ^4 correspond 
to the conjugacy classes of Aut(X (^p^ F4); also, the automorphism group of the 
twist corresponding to the conjugacy class of an element a is isomorphic to the 
commutator of a. Since PSL2(11) has trivial center, we see that every nontrivial 
twist of X (gjpa F4 has automorphism group strictly smaller than PSL2(11). 

Now take the Q ( V— 1 1 )-rational model Y of -'^(ll) considered by Ligozat [T2l 
Example 3.7.3, pp. 199-200]; Ligozat calls this curve X{11)kii- Let p be the 
prime of Q(%/— 11) over 2, with residue field F4. The automorphism group of 
Y is PSL2(11), so the reduction of Y modulo p also has automorphism group 
PSL2(11). Therefore, the reduction of Y must be X (E)f2 F4. Applying a result 
of Ligozat |T2l, Prop 3.6.1, p. 223], we find that the Jacobian of X is isogenous 
to E]}2 X Eq X El*^. (To see this, we must take the elliptic curves mentioned in 
Ligozat's proposition and compute their reductions modulo p.) 
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It follows that over F2, the Jacobian of X is isogenous to 

for some choice of a and 6, and by Remark |3.4[ we know that (a, h) is one of (4, 7), 
(5,6), and (6,5). 

For each of the three possible isogeny classes we can compute the associated zeta 
function and the number of F2-rational points on a curve with that zeta function. 
We find that if the number of F2-rational points on X is 1, then (a, h) = (4, 7); if 
#X(F2) = 3 then (a, b) = (5, 6); and if #X(F2) = 5 then (a, b) = (6, 5). 

Consider Eq, the unique elliptic curve over F2 with trace 0. The characteristic 
polynomial of Frobenius on ii^o[ll] is x'^ + 2, so the action of Frobenius on -Eo[ll] 
has two eigenspaces, one with eigenvalue 3 and one with eigenvalue —3. One finds 
that there are 10 pairing-respecting isomorphisms (p : Eq[11] ^ G x G' , and since 
{Eq,(p) and {Ef),—(p) are represented by the same point on X, we have found 5 
F2-rational points on X. Therefore the Jacobian of X decomposes as claimed in 
the statement of the theorem. □ 

Remark 4.2. One can show that the curve X has 60 cusps (that is, points that lie 
over the point at infinity on the the j-line). The field of definition of 10 of the cusps 
is F25 ; the field of definition of the other 50 is F210 . Using these facts, together 
with the modular interpretation of the non-cuspidal points on X, we can compute 
the number of points on X over any (reasonably small) extension of F2. This gives 
another method of computing the decomposition of the Jacobian of X. 

Remark 4.3. Applying Ligozat's Proposition 3.6.1, we see that the Jacobian of 
X{11)kii <E) F3 splits into a product of ordinary elliptic curves. Hence the bound 
26 for ordinary elliptic curves over F3 from Remark 13.71 is reached as well. 

5. Application: Modular curves with split Jacobians 

Let Jo(-/V) denote the Jacobian of the modular curve Xo{N) over Q. Cohen [3] 
(mentioned in [151 Remarque 2, p. 90] with the value N = 21 omitted) has computed 
a list of the odd integers N for which Jo{N) is isogenous to a product of elliptic 
curves, and Yamauchi [2TJ Thm. 1.1] extended this list to include even values of N 
as well. In this section we use Theorem 13.11 and the mathematical software package 
Sage [IT] to recompute Yamauchi's list; we note that the list in Yamauchi's theorem 
mistakenly includes N = 672 and omits N = 28. 

Theorem 5.1. Let N = with n odd. Then Jo{N) is isogenous over Q to a 
product of elliptic curves if and only if n appears in the following table and e < E{n) 
with E(n) as tabulated: 



n 


E{n) 


n 


E{n) 


n 


E{n) 


1 


7 


15 


4 


37 





3 


7 


17 


1 


45 


4 


5 


4 


19 


2 


49 





7 


4 


21 


4 


57 


1 


9 


7 


25 


4 


75 


4 


11 


2 


27 


4 


99 


2 


13 


2 


33 


2 


121 
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Proof. Suppose N is an odd integer such that JoiN) sphts into elhptic curves. 
Since N is odd the modular curve Xq{N) has good reduction modulo 2, and the 
reduced curve over F2 has split Jacobian. By Theorem 13. 1[ the genus of Xo{N) is 
at most 26. Using the fact j4j that the genus of Xo{N) is greater than or equal to 
(N - 5VN - 8)/12, we find that N is at most 422. 

Using the command JO(N) . decompositionO of the mathematics package Sage 
for all N less than 423, we find that the odd values of N with Jo{N) split are the 
twenty-one odd integers that appear as n in the table. 

To complete the proof, we note that if Jo{N) is split then so is Jo{n) for every 
divisor n of N. Therefore the integers we are searching for can be written for 
some exponent e and for some n among the odd values that we have just computed. 
For each of the possible odd parts n, we use Sage to compute the decomposition 
of jQ{2'^n) for increasing values of e until we reach a Jacobian that does not split. 
(In practice, we do not have to compute the decomposition of jQ{2'^n) if we already 
know that Jo(2"^to) docs not split for some divisor m of n. For example, since Jo(2*) 
does not split we must have E{n) < 8 for each n.) The largest value of e for which 
Jo(2^rt) splits is recorded in the table as E{n). □ 

Remark 5.2. Ekedahl and Serre [5] give a list of various values of g such that there 
exists a curve of genus g over Q with a completely split Jacobian. Many of their 
values of g come from modular curves Xo{N). The tables of modular forms that 
they had access to did not include values of N greater than 1000, so they missed a 
few of the values from Theorem 15. II The modular curves Xo(1152) and Xo(1200), 
of genus 161 and 205, respectively, allow us to add two more values of g to their 
list m Theoreme, p. 509]. 

Ekedahl and Serre also seem to have missed the curve Xo{396) of genus 61, but 
they obtain a curve of genus 61 with split Jacobian by considering a quotient of 
Xo(720) by an involution. 
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